77cc0b3c04ecc6a7efb9d6b5cc2b9227_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

77cc0b3c04ecc6a7efb9d6b5cc2b9227_JaffaCakes118
Size

116KB
MD5

77cc0b3c04ecc6a7efb9d6b5cc2b9227
SHA1

ee422f0821b7c38362c22d2a4e84c4d43b577379
SHA256

56f95893a4c1290ec98f594799a86a0b9a4972c974e6e703e3eb20c5a9175c5d
SHA512

5daa102573bd6f4aa5ca41deba6f7aef5bff4e2050ae0809349411750ef33dccb2f6b3d0a5d4d950640d168efd3371b7b925dc4050c2eb89c4bb6faea685aa8c
SSDEEP

3072:XppU1FrL+uxn+Nx3CWLJ1MHUcX4+FuXM3:Zp4FrZn+NtLxw4+YXC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
77cc0b3c04ecc6a7efb9d6b5cc2b9227_JaffaCakes118

Files

77cc0b3c04ecc6a7efb9d6b5cc2b9227_JaffaCakes118
.exe windows:1 windows x86 arch:x86

d975e67c56935cbdd8d15c60c37c5eb9

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

GetKeyboardType

advapi32

RegQueryValueExA

oleaut32

VariantChangeTypeEx

gdi32

SetTextColor

winmm

waveOutGetPosition

Sections

CODE
Size: 109KB - Virtual size: 616KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE